Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/dEmfm5NqFZjfRIhTvMubKp79Y44.roa
File: dEmfm5NqFZjfRIhTvMubKp79Y44.roa (raw, json)
Hash identifier: BmOkh6XE5RTOVotk6zZiZkDhazlZ4lEf87SVG5TOhSs=
Subject key identifier: 74:49:9F:9B:93:6A:15:98:DF:44:88:53:BC:CB:9B:2A:9E:FD:63:8E
Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Certificate serial: 1320CC50
Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/dEmfm5NqFZjfRIhTvMubKp79Y44.roa
Signing time: Sat 01 Jan 2022 09:53:38 +0000
ROA not before: Sat 01 Jan 2022 09:53:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41437
IP address blocks: 89.207.121.0/24 maxlen: 24
89.207.120.0/21 maxlen: 21
89.207.124.0/24 maxlen: 24
89.207.127.0/24 maxlen: 24
2001:a00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320916560 (0x1320cc50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Validity
Not Before: Jan 1 09:53:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74499f9b936a1598df448853bccb9b2a9efd638e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:79:75:1b:85:d9:af:18:af:93:7c:c8:63:
59:d4:91:f2:47:4d:32:cb:f4:d6:5c:4b:3d:61:39:
8c:44:27:4b:e1:2c:79:90:ef:d1:0d:f2:64:0c:01:
db:97:60:da:40:95:fc:6a:a4:b0:33:72:21:eb:f4:
38:ab:eb:68:af:6d:eb:d2:a2:ac:60:8d:76:83:df:
90:12:7c:3f:43:49:7e:34:5d:b3:93:e1:6b:fd:23:
a7:52:68:d2:b9:6d:a5:69:8c:22:67:e9:3e:d9:bb:
18:af:6f:4f:eb:74:45:9c:1b:ae:b7:05:64:61:11:
ab:c1:2d:aa:d0:59:b9:93:3e:33:08:16:8f:90:c1:
62:22:3c:8b:cd:26:79:ca:36:ea:d8:c0:2e:46:2a:
40:e4:f3:39:46:22:7b:d4:fc:07:8a:58:69:fe:c0:
29:d6:6a:76:1b:ab:c8:db:32:e8:13:28:d4:4a:94:
f7:ae:a7:34:8b:78:d8:49:2d:c1:8e:f6:1b:e4:bd:
da:51:7b:5b:76:8c:5b:d2:99:b3:30:69:21:b0:b2:
ff:e5:d4:19:e7:d2:d5:f1:da:28:54:39:a8:ef:1a:
f2:83:29:fe:3a:5b:0e:80:09:1c:c2:3a:3e:2e:24:
0b:98:ed:5b:2f:fe:ca:45:dd:61:ed:96:36:8c:a4:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:49:9F:9B:93:6A:15:98:DF:44:88:53:BC:CB:9B:2A:9E:FD:63:8E
X509v3 Authority Key Identifier:
keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/dEmfm5NqFZjfRIhTvMubKp79Y44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.120.0/21
IPv6:
2001:a00::/32
Signature Algorithm: sha256WithRSAEncryption
90:70:14:64:a1:b4:41:77:13:c9:8c:2f:d7:c4:b2:03:4c:17:
0c:a0:08:7c:4a:dc:92:ef:38:2e:e2:29:a3:5d:78:07:92:d2:
04:1a:da:12:90:7f:1f:52:15:04:e4:27:2b:48:43:a1:28:d4:
eb:e5:d2:e6:b2:56:ee:ec:e0:b5:55:09:c0:09:f3:9d:4b:44:
36:9b:77:94:ee:29:25:59:bf:40:0f:3a:6b:11:b8:89:9a:e9:
e7:fa:f6:e3:1a:4e:06:08:c2:7f:e3:b7:e9:a6:6e:01:e1:54:
aa:47:08:57:84:ce:be:14:b0:d7:24:f9:a0:54:7e:28:0f:65:
92:64:89:5c:9c:f7:46:0d:c7:5e:29:02:f9:05:c7:d7:c5:89:
35:67:4e:54:69:6d:26:1d:af:7d:08:83:69:3e:77:b5:7b:60:
87:71:a9:db:ab:89:95:59:3c:a2:fa:b5:62:ff:f1:fd:fd:89:
61:2c:8f:2b:af:62:d8:db:77:26:0b:b4:44:05:9f:56:a4:f1:
86:4e:22:16:15:19:6b:15:5b:07:bd:f2:a6:22:8c:47:af:f8:
18:7d:d1:f9:0a:a5:c6:d9:5a:42:df:fe:26:34:41:c3:a8:e8:
9f:1f:30:3c:74:a2:dd:5e:e8:bf:22:b7:d7:c0:26:f6:34:dd:
15:25:d1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:29 2024 by rpki-client on console-ams.rpki-client.org